CVEProject vulnerabilities
We track 2 vulnerabilities in CVEProject products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 2, 2022.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest CVEProject vulnerabilities
- 7.5 High severity
cve-services: Cleartext Storage of Sensitive Information
CVEProject/cve-services is an open source project used to operate the CVE services API. A conditional in 'data.js' has potential for production secrets to be written to disk. The affected method writes the generated randomKey to disk if the environment is not
- 7.5 High severity
cve-services: Insertion of Sensitive Information into Log File
The CVEProject/cve-services is an open source project used to operate the CVE services api. In versions up to and including 1.1.1 the `org.conroller.js` code would erroneously log user secrets. This has been resolved in commit `46d98f2b` and should be availabl